Safari MCP

Created By

achiya-automation2 months ago

Native Safari browser automation for AI agents — 80 tools via AppleScript, zero Chrome overhead, keeps logins, runs silently. macOS only.

# safari

# browser-automation

Overview Content Tools Comments

Overview

🦁 Safari MCP

The only MCP server for Safari — native browser automation for AI agents.

80 tools · Zero dependencies · ~5ms per command · 60% less CPU than Chrome

Quick Start · All 80 Tools · Examples · Why Safari MCP? · Architecture · Changelog

Safari MCP Demo

TL;DR: Use your real Safari with all your logins, cookies, and sessions. No headless browsers, no Chrome, no Puppeteer. Just pure AppleScript + JavaScript running natively on macOS — 60% less CPU/heat on Apple Silicon.

🤔 Why not just use Playwright or Chrome DevTools MCP?

Problem	Safari MCP Solution
Chrome DevTools MCP heats up your Mac	Native WebKit — ~60% less CPU
Playwright launches a new browser without your logins	Uses your real Safari with all sessions
Puppeteer requires Chrome + debug port	Zero dependencies — just AppleScript
Headless browsers can't access your authenticated sessions	Gmail, GitHub, Slack — already logged in
Browser automation steals window focus	Safari stays in background, never interrupts

Highlights

80 tools — navigation, clicks, forms, screenshots, network, storage, accessibility, and more
Zero heat — native WebKit on Apple Silicon, ~60% less CPU than Chrome
Your real browser — keeps all logins, cookies, sessions (Gmail, GitHub, Ahrefs, etc.)
Background operation — Safari stays in the background, no window stealing
No dependencies — no Puppeteer, no Playwright, no WebDriver, no Chrome
Persistent process — reuses a single osascript process (~5ms per command vs ~80ms)
Framework-compatible — React, Vue, Angular, Svelte form filling via native setters

Quick Start

Prerequisites

macOS (any version with Safari)
Node.js 18+
Safari → Settings → Advanced → Show features for web developers ✓
Safari → Develop → Allow JavaScript from Apple Events ✓

Install

Option A — npm (recommended):

npm install -g safari-mcp

Option B — Homebrew:

brew install achiya-automation/tap/safari-mcp

Option C — from source:

git clone https://github.com/achiya-automation/safari-mcp.git
cd safari-mcp
npm install

Configure

Add to your MCP client config:

Claude Code (~/.mcp.json)

{
  "mcpServers": {
    "safari": {
      "command": "node",
      "args": ["/path/to/safari-mcp/index.js"]
    }
  }
}

Claude Desktop (claude_desktop_config.json)

{
  "mcpServers": {
    "safari": {
      "command": "node",
      "args": ["/path/to/safari-mcp/index.js"]
    }
  }
}

Cursor (.cursor/mcp.json)

{
  "mcpServers": {
    "safari": {
      "command": "node",
      "args": ["/path/to/safari-mcp/index.js"]
    }
  }
}

Windsurf / VS Code + Continue

{
  "mcpServers": {
    "safari": {
      "command": "node",
      "args": ["/path/to/safari-mcp/index.js"]
    }
  }
}

Usage Workflow

The recommended pattern for AI agents using Safari MCP:

1. safari_snapshot        → Get page state (accessibility tree)
2. safari_click/fill/...  → Interact with elements by ref
3. safari_snapshot        → Verify the result

Element targeting — tools accept multiple targeting strategies:

Strategy	Example	Best for
CSS selector	`#login-btn`, `.submit`	Unique elements
Visible text	`"Sign In"`, `"Submit"`	Buttons, links
Coordinates	`x: 100, y: 200`	Canvas, custom widgets
Ref from snapshot	`ref: "e42"`	Any element from accessibility tree

Tip: Start with safari_snapshot to get element refs, then use refs for precise targeting. This is faster and more reliable than CSS selectors.

Tools (80)

Tool	Description
`safari_navigate`	Navigate to URL (auto HTTPS, wait for load)
`safari_go_back`	Go back in history
`safari_go_forward`	Go forward in history
`safari_reload`	Reload page (optional hard reload)

Page Reading (3)

Tool	Description
`safari_read_page`	Get title, URL, and text content
`safari_get_source`	Get full HTML source
`safari_navigate_and_read`	Navigate + read in one call

Click & Interaction (5)

Tool	Description
`safari_click`	Click by CSS selector, visible text, or coordinates
`safari_double_click`	Double-click (select word, etc.)
`safari_right_click`	Right-click (context menu)
`safari_hover`	Hover over element
`safari_click_and_wait`	Click + wait for navigation

Form Input (7)

Tool	Description
`safari_fill`	Fill input (React/Vue/Angular compatible)
`safari_clear_field`	Clear input field
`safari_select_option`	Select dropdown option
`safari_fill_form`	Batch fill multiple fields
`safari_fill_and_submit`	Fill form + submit in one call
`safari_type_text`	Type real keystrokes (JS-based, no System Events)
`safari_press_key`	Press key with modifiers

Screenshots & PDF (3)

Tool	Description
`safari_screenshot`	Screenshot as PNG (viewport or full page)
`safari_screenshot_element`	Screenshot a specific element
`safari_save_pdf`	Export page as PDF

Scroll (3)

Tool	Description
`safari_scroll`	Scroll up/down by pixels
`safari_scroll_to`	Scroll to exact position
`safari_scroll_to_element`	Smooth scroll to element

Tab Management (4)

Tool	Description
`safari_list_tabs`	List all tabs (index, title, URL)
`safari_new_tab`	Open new tab (background, no focus steal)
`safari_close_tab`	Close tab
`safari_switch_tab`	Switch to tab by index

Wait (2)

Tool	Description
`safari_wait_for`	Wait for element, text, or URL change
`safari_wait`	Wait for specified milliseconds

JavaScript (1)

Tool	Description
`safari_evaluate`	Execute arbitrary JavaScript, return result

Element Inspection (4)

Tool	Description
`safari_get_element`	Element details (tag, rect, attrs, visibility)
`safari_query_all`	Find all matching elements
`safari_get_computed_style`	Computed CSS styles
`safari_detect_forms`	Auto-detect all forms with field selectors

Accessibility (1)

Tool	Description
`safari_accessibility_snapshot`	Full a11y tree: roles, ARIA, focusable elements

Drag & Drop (1)

Tool	Description
`safari_drag`	Drag between elements or coordinates

File Operations (2)

Tool	Description
`safari_upload_file`	Upload file via JS DataTransfer (no file dialog!)
`safari_paste_image`	Paste image into editor (no clipboard touch!)

Dialog & Window (2)

Tool	Description
`safari_handle_dialog`	Handle alert/confirm/prompt
`safari_resize`	Resize browser window

Device Emulation (2)

Tool	Description
`safari_emulate`	Emulate device (iPhone, iPad, Pixel, Galaxy)
`safari_reset_emulation`	Reset to desktop

Cookies & Storage (10)

Tool	Description
`safari_get_cookies`	Get all cookies
`safari_set_cookie`	Set cookie with all options
`safari_delete_cookies`	Delete one or all cookies
`safari_local_storage`	Read localStorage
`safari_set_local_storage`	Write localStorage
`safari_delete_local_storage`	Delete/clear localStorage
`safari_session_storage`	Read sessionStorage
`safari_set_session_storage`	Write sessionStorage
`safari_delete_session_storage`	Delete/clear sessionStorage
`safari_export_storage`	Export all storage as JSON (backup/restore sessions)
`safari_import_storage`	Import storage state from JSON

Clipboard (2)

Tool	Description
`safari_clipboard_read`	Read clipboard text
`safari_clipboard_write`	Write text to clipboard

Network (6)

Tool	Description
`safari_network`	Quick network requests via Performance API
`safari_start_network_capture`	Start detailed capture (fetch + XHR)
`safari_network_details`	Get captured requests with headers/timing
`safari_clear_network`	Clear captured requests
`safari_mock_route`	Mock network responses (intercept fetch/XHR)
`safari_clear_mocks`	Remove all network mocks

Console (4)

Tool	Description
`safari_start_console`	Start capturing console messages
`safari_get_console`	Get all captured messages
`safari_clear_console`	Clear captured messages
`safari_console_filter`	Filter by level (log/warn/error)

Performance (2)

Tool	Description
`safari_performance_metrics`	Navigation timing, Web Vitals, memory
`safari_throttle_network`	Simulate slow-3g/fast-3g/4g/offline

Data Extraction (4)

Tool	Description
`safari_extract_tables`	Tables as structured JSON
`safari_extract_meta`	All meta: OG, Twitter, JSON-LD, canonical
`safari_extract_images`	Images with dimensions and loading info
`safari_extract_links`	Links with rel, external/nofollow detection

Advanced (5)

Tool	Description
`safari_override_geolocation`	Override browser geolocation
`safari_list_indexed_dbs`	List IndexedDB databases
`safari_get_indexed_db`	Read IndexedDB records
`safari_css_coverage`	Find unused CSS rules
`safari_analyze_page`	Full page analysis in one call

Automation (1)

Tool	Description
`safari_run_script`	Run multiple actions in a single call (batch)

Security

Safari MCP runs locally on your Mac with minimal attack surface:

Aspect	Detail
Network	No remote connections — all communication is local (stdio + localhost)
Permissions	macOS system permissions required (Screen Recording for screenshots)
Data	No telemetry, no analytics, no data sent anywhere
Extension	Communicates only with `localhost:9224`, validated by Safari
Code	Fully open source (MIT) — audit every line

Safari MCP vs Alternatives

Feature	Safari MCP	Chrome DevTools MCP	Playwright MCP
CPU/Heat	🟢 Minimal	🔴 High	🟡 Medium
Your logins	✅ Yes	✅ Yes	❌ No
macOS native	✅ WebKit	❌ Chromium	❌ Chromium/WebKit
Dependencies	None	Chrome + debug port	Playwright runtime
Tools	80	~30	~25
File upload	JS (no dialog)	CDP	Playwright API
Image paste	JS (no clipboard)	CDP	Playwright API
Focus steal	❌ Background	❌ Background	❌ Headless
Network mocking	✅	❌	✅
Lighthouse	❌	✅	❌
Performance trace	❌	✅	❌

Tip: Use Safari MCP for daily browsing tasks (95% of work) and Chrome DevTools MCP only for Lighthouse/Performance audits.

Safari MCP Servers Comparison

Feature	safari-mcp	MCPSafari	safari-mcp-server
Tools	80	23	~10
License	MIT	None	MIT
Install	npm / Homebrew	Binary	npm
Storage (cookies, localStorage)	10 tools	None	None
Data extraction (tables, links)	5 tools	None	None
Network mocking	Yes	No	No
Device emulation	Yes	No	No
File upload (no dialog)	Yes	No	No
PDF export	Yes	No	No
Console capture	4 tools	1	No
Performance metrics	Yes	No	No
Fallback engine	Dual (Extension + AppleScript)	Extension only	WebDriver

Architecture

Safari MCP uses a dual-engine architecture — the Extension is preferred for speed and advanced capabilities, with AppleScript as an always-available fallback:

Claude/Cursor/AI Agent
        ↓ MCP Protocol (stdio)
   Safari MCP Server (Node.js)
        ↓                    ↓
   Extension (HTTP)     AppleScript + Swift daemon
   (~5-20ms/cmd)        (~5ms/cmd, always available)
        ↓                    ↓
   Content Script       do JavaScript in tab N
        ↓                    ↓
   Page DOM ←←←←←←←←←← Page DOM

Key design decisions:

Dual engine with automatic fallback — Extension is preferred; if not connected, AppleScript handles everything seamlessly
Persistent Swift helper — one long-running process instead of spawning per command (16x faster)
Tab-indexed operations — all JS runs on a specific tab by index, never steals visual focus
JS-first approach — typing, clicking, file upload all use JavaScript events (no System Events keyboard conflicts)
No activate — Safari is never brought to foreground

Safari Extension (Optional)

The Safari MCP Extension is optional but recommended. Without it, ~80% of functionality works via AppleScript alone. The extension adds capabilities that AppleScript cannot provide:

What the Extension Adds

Capability	With Extension	AppleScript Only
Closed Shadow DOM (Reddit, Web Components)	✅ Full access	❌ Invisible
Strict CSP sites	✅ Bypasses via MAIN world	❌ Often blocked
React/Vue/Angular state manipulation	✅ Deep (Fiber, ProseMirror)	⚠️ Basic
Loading state detection (spinners, skeletons)	✅ Smart detection	❌ No
Dialog handling (alert/confirm)	❌	✅ Only AppleScript
Native OS-level click (CGEvent)	❌	✅ Only AppleScript
PDF export	❌	✅ Only AppleScript

When do you need the extension? If you're automating modern SPAs with closed shadow DOM (e.g., Reddit), sites with strict Content Security Policy, or framework-heavy editors (Draft.js, ProseMirror, Slate).

Installing the Extension

The extension requires a one-time build with Xcode (free, included with macOS):

Prerequisites: Xcode (install from App Store — free)

# 1. Build the extension app
cd safari-mcp
xcodebuild -project "xcode/Safari MCP/Safari MCP.xcodeproj" \
  -scheme "Safari MCP (macOS)" -configuration Release build

# 2. Find and open the built app
open ~/Library/Developer/Xcode/DerivedData/Safari_MCP-*/Build/Products/Release/Safari\ MCP.app

Then in Safari:

Safari → Settings → Advanced → enable Show features for web developers
Safari → Develop → Allow Unsigned Extensions (required each Safari restart)
Safari → Settings → Extensions → enable Safari MCP Bridge

The extension connects automatically to the MCP server on port 9224.

Note: "Allow Unsigned Extensions" resets every time Safari restarts. You'll need to re-enable it in the Develop menu after each restart. The extension itself stays installed.

Toolbar icon status:

ON — connected to MCP server
OFF — manually disabled via popup
(no badge) — server not running, will auto-reconnect

macOS Permissions

Safari MCP needs these one-time permissions:

Permission	Where	Why
JavaScript from Apple Events	Safari → Develop menu	Required for `do JavaScript`
Screen Recording	System Settings → Privacy	Required for `safari_screenshot`
Accessibility	System Settings → Privacy	Required for `safari_save_pdf` only

Troubleshooting

Issue	Fix
"AppleScript error"	Enable "Allow JavaScript from Apple Events" in Safari → Develop
Screenshots empty	Grant Screen Recording permission to Terminal/VS Code
Tab not found	Call `safari_list_tabs` to refresh tab indices
Hebrew keyboard issues	All typing uses JS events — immune to keyboard layout
HTTPS blocked	`safari_navigate` auto-tries HTTPS first, falls back to HTTP
Safari steals focus	Ensure you're on latest version — `newTab` restores your active tab

Works With

Safari MCP works with any MCP-compatible client:

Client	Status
Claude Code	✅ Tested daily
Claude Desktop	✅ Tested
Cursor	✅ Tested
Windsurf	✅ Compatible
VS Code + Continue	✅ Compatible

Contributing

PRs welcome! See CONTRIBUTING.md for setup instructions.

The codebase is two files:

safari.js — Safari automation layer (AppleScript + JavaScript)
index.js — MCP server with tool definitions

Star History

If Safari MCP saved you from Chrome overhead, consider giving it a ⭐

License

MIT — use it however you want.

Try in Playground

Server Config

{
  "mcpServers": {
    "safari-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "safari-mcp"
      ]
    }
  }
}

Project Info

Created At

2 months ago

Updated At

2 months ago

Author Name

achiya-automation

Star

Language

License

Recommend Servers

View All

Cricketstudio Mcp

@i-m-arul

29 MCP tools for IPL 2026, IPL historical (18 seasons), and Major League Cricket. Free, no API key.

9 hours ago

Pathmode

@pathmodeio

Build structured intent specs through Socratic AI conversation (zero-config), or connect to your Pathmode workspace for strategic context, dependency graphs, and team governance. v1.5.0 ships with a Claude Code skill pack — 7 auto-triggering skills (compile-intent, grill-intent, verify-intent, review-against-intent, split-intent-to-issues, handoff-intent, setup-pathmode-workflow) installable via `npx @pathmode/mcp-server install-skills`. Makes agents build the right thing, not just any thing.

a day ago

GitLab

@modelcontextprotocol

GitLab API, enabling project management

a year ago

Twosio

@2s-io

Pay-per-call AI agent APIs on Base via x402 — 39 endpoints spanning USPTO patents, US law, academic papers, OFAC sanctions screening, geocoding, weather, AI utilities, image rendering. No signup or API keys — each call settles instantly in USDC.

10 hours ago

Steam Mcp

@Sarg338

A read-only Model Context Protocol server for Valve's public Steam Web API and storefront. Ask about your friends and games, playtime and achievements, as well as get game suggestions based on your library. Plus account-independent things like sales, reviews, live player counts, Steam Deck compatibility, discovery, and recommendations — bring your own free Steam API key.

a day ago

Icp Fit Scorer

@mambalabsdev

Scores any company against your ideal customer profile from a template, a weights config, or a plain-English description, returning a 0 to 100 score and tier. Part of the Mamba Labs signal toolkit.

2 days ago

Krimto

@krimto-labs

Open-source memory for AI coding agents. Tell your agent to "remember" something in Cursor, Claude Code, Codex, or Gemini CLI, and Krimto saves it as a plain markdown file in a git repo you own — not rows in a vendor's database. Recall it later in a new chat, a different editor, or on another machine. One npx command, no account, no API key. Apache-2.0, with a user → team → org scope hierarchy so a team can share memory while personal notes stay private. Run: npx @krimto-labs/krimto init

18 hours ago

Budget Governor

@mightbesaad

Budget & cost control for AI agents: hard per-agent spend caps, rate limits, idempotency, and human-in-the-loop approval — enforced before each LLM call, not after the invoice. One hosted MCP endpoint (no proxy or self-hosting), settled via x402 (USDC on Base).

a day ago

Gpt Scrambler

2 days ago

Runapi Mcp Server

@runapi-ai

MCP server for AI image generation, video generation, music creation, text-to-speech, and LLM chat. 130+ models from Flux, Kling, Seedance, Veo, Suno, ElevenLabs, Claude, GPT, Gemini, and more. Browse models, check pricing, create tasks, and poll results. Free model discovery without API key. Works with Claude Code, Cursor, Codex, Windsurf, and any MCP host.

14 hours ago

Linux Info Mcp

@ranglust

62(and growing) read-only diagnostic tools that let Claude inspect your Linux fleet without touching it. Files, systemd, performance, networking, processes, disks, kernel, packages, Docker — each a hardened wrapper around a command you already trust, run over your own SSH config. Read-only by construction: there is no code path that restarts a service, edits a file, installs a package, or runs anything that mutates state. Every argument is validated and shell-quoted, flag injection is killed by per-tool whitelists, and hosts can be pinned to an allowlist. Point it at production and sleep. Run any tool on one host, or pass a list to fan out in parallel — bounded, with a hard 25-host ceiling so a curious model can't trigger an SSH storm. Why - Can't break anything — no mutate path exists. No restart, no edit, no install, no -exec. - Injection-hardened — shlex.quote everywhere, flag whitelists, NUL/newline rejection, host allowlist. - Your SSH, your rules — uses your ssh/agent or any wrapper (tsh ssh, jump hosts). Server never sees a credential. - Bounded — byte-capped output, per-call timeouts, capped multi-host fan-out. - Auditable — structured {stdout, stderr, exit_code, truncated} + optional JSONL logs with per-call IDs. Setup Python via uv. One mcpServers entry, tuned by env vars. Works with Claude Desktop and Claude Code.

2 days ago

A4B CMMS

@a4b

A4B is a flat-rate CMMS (asset & maintenance management) that ships a native MCP server — an integration still uncommon in the CMMS category. AI assistants like Claude and ChatGPT can query asset inventory, create and update assets and maintenance tasks, search history, and generate reports. Secured with OAuth sign-in, audit logging, and per-organization isolation.

a day ago

Google Maps

@modelcontextprotocol

Location services, directions, and place details

a year ago

Conclave Ai Agent Arena

@lddj1980

Competitive arena for AI agents via MCP. Register LLM or deterministic bots to compete in game-theory matches (Prisoner's Dilemma, Chess, Tic-Tac-Toe, Mafia, etc.) with ELO rankings, replays, and public leaderboards.

2 days ago

Framelink Figma MCP Server

@GLips

MCP server to provide Figma layout information to AI coding agents like Cursor

TypeScript

a year ago

Mcp Server Chatsum

@chatmcp

summarize chat message

typescript

a year ago

MCP Advisor

@istarwyh

MCP Advisor & Installation - Use the right MCP server for your needs

TypeScript

a year ago

Scrape Agent Mcp

@artespraticas

Service name: Scrape Agent Service base URL: https://scrapeagent.xyz Website URL: https://scrapeagent.xyz Email: your email Category: Data Description: Pay-per-use web scraping API built on x402. Extract clean text, links or HTML from any URL for $0.01 USDC on Base. No API key, no subscription needed. Perfect for AI agents that need web data on demand. Endpoint paths: /api/scrape/x402 Notes: Endpoint returns HTTP 402 with valid accepts[] payload on both GET and POST requests without X-PAYMENT header. Custom domain, landing page at root, OpenAPI spec at /openapi.json.

4 hours ago

Serper MCP Server

@garymengcom

A Serper MCP Server

Python

a year ago

Appendix

@appendixhealth

Appendix turns any AI health conversation into a board-certified physician's opinion — with a real prescription when clinically appropriate. Search medical literature and submit a clinical encounter for review, all from your agent.

a day ago

Playwright Mcp

@microsoft

Playwright MCP server

TypeScript

10 months ago

Agiflow

@Agiflow

Agiflow is the simple project board built for AI assistants. Connect Claude, ChatGPT, Cursor, or Codex over MCP and they read and update tasks, work units, artifacts, and vaults on one board that stays the source of truth.

2 days ago

HoldingsIntel - Smart Money Verdict per stock & fund from SEC 13F, insider, activist & congressional filings

@HoldingsIntel

Smart Money Verdict per stock & fund from SEC 13F, insider, activist & congressional filings — query institutional positioning, insider trades, activist stakes, and congressional trading from any MCP client.

2 days ago

Screenshot

@faridmth

Capture website screenshots from any MCP client via the ScreenshotRender API. Returns the image inline plus a hosted URL and page metadata. Bring your own ScreenshotRender API key.

2 days ago

Agentmagnet

@egri-creator

Universal product search across 40+ stores (Amazon 22 countries, eBay 22 countries, Awin 15k merchants, AliExpress, SaaS, B2B) — 52 languages, x402 micropayments.

a day ago

Mamba Labs GTM Suite

@mambalabsdev

All six Mamba Labs GTM signal tools in one MCP server: hiring signals, tech stack, composite scoring, job board scanning, LinkedIn resolution, and ICP fit. Backed by Apify, Clay-ready JSON.

2 days ago

Pharmax Pricing Index

@PHARMAX

PHARMAX Pricing Index - MCP server exposing affordable generic-medication pricing under HSA Singapore licensure. 4 tools: search_price (molecule USD + local currency), list_category (ED/GLP1/Cognitive/Hair/PrEP/Antiviral/Other), get_oopi (monthly Out-of-Pocket Index with PMI methodology), get_disclosure_block (regulatory disclosure). CC-BY-4.0 data, MIT code, Cloudflare Workers free-tier compatible. Live at mcp.pharmax-ai.com.

an hour ago

Suparse

@Suparse

Extract structured data from PDFs and documents with Suparse AI OCR.

2 days ago

Indotender Mcp

@IndoTender

Connect your AI assistant to IndoTender — Indonesian government procurement data via the Model Context Protocol. Search LPSE tenders, procurement realisasi, company profiles, treasury payments, and government agency directories — all from your AI chat.

10 hours ago

Mailtrap Email Sending MCP

@Mailtrap

An MCP server that provides a tool for sending transactional emails via Mailtrap

a year ago

Safari MCP

🦁 Safari MCP

Highlights

Quick Start

Prerequisites

Install

Configure

Usage Workflow

Tools (80)

Navigation (4)

Page Reading (3)

Click & Interaction (5)

Form Input (7)

Screenshots & PDF (3)

Scroll (3)

Tab Management (4)

Wait (2)

JavaScript (1)

Element Inspection (4)

Accessibility (1)

Drag & Drop (1)

File Operations (2)

Dialog & Window (2)

Device Emulation (2)

Cookies & Storage (10)

Clipboard (2)

Network (6)

Console (4)

Performance (2)

Data Extraction (4)

Advanced (5)

Automation (1)

Security

Safari MCP vs Alternatives

Safari MCP Servers Comparison

Architecture

Safari Extension (Optional)

What the Extension Adds

Installing the Extension

macOS Permissions

Troubleshooting

Works With

Contributing

Star History

License

Server Config

Recommend Servers